Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.mft
File: w7iL5VE_Guckk1Ivpml-_zNpKuA.mft (raw, json)
Hash identifier: EjC4h1QDrthxWSQ16AKN9ljLQkK7PiLGeGCdzhLLeOU=
Subject key identifier: E3:A2:B4:22:91:06:6A:21:74:CE:BF:C7:A3:76:F4:90:9E:39:DB:DF
Authority key identifier: C3:B8:8B:E5:51:3F:1A:E7:24:93:52:2F:A6:69:7E:FF:33:69:2A:E0
Certificate issuer: /CN=c3b88be5513f1ae72493522fa6697eff33692ae0
Certificate serial: 019D26CCCFE23EB96134189D9F8468A99953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7iL5VE_Guckk1Ivpml-_zNpKuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.mft
Manifest number: 0B28
Signing time: Wed 25 Mar 2026 21:00:49 +0000
Manifest this update: Wed 25 Mar 2026 21:00:49 +0000
Manifest next update: Thu 26 Mar 2026 21:00:49 +0000
Files and hashes: 1: 8rmDqmEsv3U_nLQ78eYKP67sL2I.roa (hash: QZ5ZJadUwZH2YCH4im1WUkClReI4yp0qFMn1l3avxQE=)
2: w7iL5VE_Guckk1Ivpml-_zNpKuA.crl (hash: SBWEyVPJ6IGl9SZsYMkNPJj+D5Eiwln8q2WvXpkpuTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/w7iL5VE_Guckk1Ivpml-_zNpKuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:cf:e2:3e:b9:61:34:18:9d:9f:84:68:a9:99:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b88be5513f1ae72493522fa6697eff33692ae0
Validity
Not Before: Mar 25 21:00:49 2026 GMT
Not After : Mar 26 21:00:49 2026 GMT
Subject: CN=e3a2b42291066a2174cebfc7a376f4909e39dbdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6c:f2:11:77:d0:46:ef:52:34:d9:8f:82:cf:
50:dd:15:0b:11:0f:fc:55:0b:15:a4:7c:7c:87:e9:
99:f8:a2:eb:e3:eb:98:4a:27:35:99:e3:dc:65:21:
1e:35:b2:38:31:14:1f:69:2f:c2:e2:a4:ce:26:b7:
1e:4d:34:16:38:c3:5f:96:ae:09:53:ea:e7:56:d7:
be:d4:b9:30:4a:e5:d7:e1:06:02:bd:45:17:66:02:
4d:09:48:f8:6c:17:88:a2:c7:fa:65:dd:e5:08:54:
9d:ad:29:5d:2d:46:60:12:5d:d1:38:94:88:5d:0b:
4b:a6:48:fa:8a:d1:95:72:2f:5b:94:c3:ed:a9:88:
f1:62:de:28:da:48:98:67:e7:bc:7d:1f:05:74:25:
f3:a2:84:e8:f0:a7:b6:ab:cd:72:e7:3d:78:3d:76:
96:4a:39:af:b4:8d:f2:83:16:43:b6:ca:8c:ad:9a:
cd:75:14:d4:90:5b:e0:8e:10:3f:30:2f:02:5f:10:
7a:67:96:17:5d:22:72:40:58:86:1a:ab:70:a1:ea:
ac:8d:68:06:4e:59:87:7d:42:7a:f7:ba:7d:89:68:
28:53:d0:65:cb:41:bd:9a:9e:d4:5d:c4:5d:82:54:
af:bc:9a:02:de:9c:94:1a:b3:de:c0:e4:18:5a:57:
50:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A2:B4:22:91:06:6A:21:74:CE:BF:C7:A3:76:F4:90:9E:39:DB:DF
X509v3 Authority Key Identifier:
keyid:C3:B8:8B:E5:51:3F:1A:E7:24:93:52:2F:A6:69:7E:FF:33:69:2A:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7iL5VE_Guckk1Ivpml-_zNpKuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:e5:53:1e:1c:ab:a0:89:c0:e3:8f:65:4e:8e:f7:b7:67:ff:
64:42:84:7c:ce:03:50:bd:19:6b:1c:03:e2:94:71:ad:17:83:
6b:e6:f8:cd:8d:1c:1c:ba:ed:73:39:c4:1c:6b:dc:05:ec:d6:
da:1f:5b:a9:a1:79:ab:98:55:1d:ac:9c:be:e7:1a:04:53:bd:
58:df:bf:4f:de:34:55:be:59:28:28:a7:89:14:e2:6e:8f:48:
4a:36:01:47:89:c6:3c:cc:fc:4d:a7:72:25:24:09:0e:98:34:
9d:dd:59:ad:15:cc:d3:de:d7:f7:ed:77:4c:cf:0c:1a:d2:1c:
8d:73:1d:c9:90:5b:27:ec:87:65:cc:13:69:36:59:e2:45:66:
f5:5f:e1:2a:63:4f:58:35:b1:6f:36:f6:93:31:52:eb:b2:dc:
8c:92:3e:9d:ed:b4:85:78:c1:1b:cb:62:5c:0e:c0:c2:13:12:
4d:46:55:96:2d:51:21:34:e6:c7:7e:8b:69:3b:5f:28:c3:b6:
12:32:d4:92:7b:ce:d2:07:11:37:92:24:10:a8:31:99:53:f3:
c4:72:e2:0e:00:17:34:f5:cd:0a:41:6d:a3:0f:87:3c:24:76:
e8:69:21:be:74:6f:c4:25:62:59:c3:ad:e1:53:6a:e9:50:e0:
1f:69:c4:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzM/iPrlhNBidn4RoqZlTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYjg4YmU1NTEzZjFhZTcyNDkzNTIyZmE2Njk3ZWZmMzM2
OTJhZTAwHhcNMjYwMzI1MjEwMDQ5WhcNMjYwMzI2MjEwMDQ5WjAzMTEwLwYDVQQD
EyhlM2EyYjQyMjkxMDY2YTIxNzRjZWJmYzdhMzc2ZjQ5MDllMzlkYmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mzyEXfQRu9SNNmPgs9Q3RULEQ/8
VQsVpHx8h+mZ+KLr4+uYSic1mePcZSEeNbI4MRQfaS/C4qTOJrceTTQWOMNflq4J
U+rnVte+1LkwSuXX4QYCvUUXZgJNCUj4bBeIosf6Zd3lCFSdrSldLUZgEl3ROJSI
XQtLpkj6itGVci9blMPtqYjxYt4o2kiYZ+e8fR8FdCXzooTo8Ke2q81y5z14PXaW
SjmvtI3ygxZDtsqMrZrNdRTUkFvgjhA/MC8CXxB6Z5YXXSJyQFiGGqtwoeqsjWgG
TlmHfUJ697p9iWgoU9Bly0G9mp7UXcRdglSvvJoC3pyUGrPewOQYWldQDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOitCKRBmohdM6/x6N29JCeOdvfMB8GA1UdIwQY
MBaAFMO4i+VRPxrnJJNSL6Zpfv8zaSrgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzdpTDVWRV9HdWNrazFJdnBtbC1fek5wS3VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy82ZTZkZjgtZTcyYS00MTU1LTllMDgt
MGU0N2VkZTMwNWIzLzEvdzdpTDVWRV9HdWNrazFJdnBtbC1fek5wS3VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy82ZTZkZjgtZTcyYS00MTU1LTllMDgtMGU0N2VkZTMwNWIz
LzEvdzdpTDVWRV9HdWNrazFJdnBtbC1fek5wS3VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApeVTHhyr
oInA449lTo73t2f/ZEKEfM4DUL0ZaxwD4pRxrReDa+b4zY0cHLrtcznEHGvcBezW
2h9bqaF5q5hVHaycvucaBFO9WN+/T940Vb5ZKCiniRTibo9ISjYBR4nGPMz8Tady
JSQJDpg0nd1ZrRXM097X9+13TM8MGtIcjXMdyZBbJ+yHZcwTaTZZ4kVm9V/hKmNP
WDWxbzb2kzFS67LcjJI+ne20hXjBG8tiXA7AwhMSTUZVli1RITTmx36LaTtfKMO2
EjLUknvO0gcRN5IkEKgxmVPzxHLiDgAXNPXNCkFtow+HPCR26GkhvnRvxCViWcOt
4VNq6VDgH2nECQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:50:54 2026 by rpki-client